CVE-2025-53192

The Apache Commons OGNL library is vulnerable to an Improper Neutralization of Expression/Command Delimiters flaw. When using the Ognl.getValue API, the OGNL engine parses expressions with capabilities that allow accessing and invoking various methods. Because the OgnlRuntime blocklist is not com...